Skip to main content

Legal

Privacy Policy

How we collect, use and protect your personal information.

Draft for review. This document is a professionally structured draft. It must be reviewed against SHOAIBX LIMITED's actual business practices — and ideally by a qualified legal adviser — before it is relied upon. Last updated: 2 November 2026.

1. Who we are

This website is operated by SHOAIBX LIMITED, a private limited company registered in England and Wales under company number 17475454, with its registered office at 103–105 Hammersmith Grove, London, England, W6 0NQ ("we", "us", "our").

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller of personal information collected through this website. You can contact us about privacy matters at shoibxlimited@gmail.com.

[OWNER TO CONFIRM: ICO registration status and number, if applicable. Most organisations that process personal data must pay a data protection fee to the Information Commissioner's Office unless exempt.]

2. Information we collect

We may collect the following information:

  • Information you give us — for example your name, business name, email address, phone number, website address, the service you are interested in, your approximate budget and the details of your project when you complete our enquiry form, email or call us.
  • Client information — if you become a client, information needed to deliver our services, such as account access details you choose to share, invoicing information and correspondence.
  • Technical information — our hosting provider automatically processes information such as IP addresses, browser type and pages requested in server logs to deliver and secure the website.
  • Analytics information — only if you consent to analytics cookies, information about how you use the website (see our Cookie Policy).

We do not knowingly collect special category data, and we ask that you do not include sensitive personal information in enquiries.

3. Contact form enquiries

When you submit our enquiry form, the information you provide is sent securely to our business email inbox via a transactional email service so that we can respond to you. We do not store enquiries in a website database. Before sending, you are asked to confirm you have read this policy.

To protect the form from spam and abuse, we use measures such as a hidden "honeypot" field, submission timing checks and temporary rate limiting based on your IP address. [If enabled: we also use Cloudflare Turnstile, a security check that may process technical information about your browser.]

4. How we use your information

  • To respond to your enquiry and provide quotes or proposals.
  • To deliver services you have ordered and manage our relationship with you.
  • To send invoices, collect payments and keep financial records.
  • To maintain the security and performance of our website.
  • With your consent, to understand how our website is used and to measure advertising.
  • To comply with legal and regulatory obligations.

We do not sell your personal information. We will only send you marketing emails if you have agreed to receive them or where otherwise permitted by law, and you can opt out at any time.

5. Lawful bases for processing

  • Steps prior to a contract / contract — responding to enquiries about our services and delivering services you order.
  • Legitimate interests — running and securing our business and website, and handling general correspondence, where these interests are not overridden by your rights.
  • Consent — analytics and marketing cookies, and any optional marketing communications. You can withdraw consent at any time.
  • Legal obligation — keeping accounting and tax records.

6. Third-party services

We use carefully selected service providers (data processors) who process personal information on our behalf, under contract, only as needed to provide their services. These may include:

  • Website hosting — [e.g. Vercel Inc. — OWNER TO CONFIRM]
  • Transactional email delivery for contact form messages — [e.g. Resend or your SMTP provider — OWNER TO CONFIRM]
  • Email hosting — Google (Gmail), for our business inbox.
  • Analytics — Google Analytics, only with your consent.
  • Advertising measurement — Meta Pixel, only with your consent and only if enabled.
  • Spam protection — Cloudflare Turnstile, only if enabled.

We may also share information with professional advisers (such as accountants or lawyers) or where required by law.

7. International transfers

Some of our service providers may process data outside the United Kingdom, including in the United States. Where this happens, we rely on appropriate safeguards recognised under UK data protection law, such as adequacy regulations (including the UK–US data bridge for certified organisations) or the International Data Transfer Agreement / Addendum to standard contractual clauses.

8. Data retention

  • Enquiries that do not lead to work — kept for up to 24 months, then deleted.
  • Client records and correspondence — kept for the duration of our relationship and up to 6 years afterwards, in line with UK limitation periods.
  • Accounting records — kept for at least 6 years as required by UK law.
  • Analytics data — retained according to the settings in our analytics account (we aim for no more than 14 months).

[OWNER TO CONFIRM retention periods reflect actual practice.]

9. Security

We use appropriate technical and organisational measures to protect personal information, including encrypted (HTTPS) connections, access controls and reputable service providers. No method of transmission over the internet is completely secure, but we work to protect your information.

10. Your rights

Under UK data protection law you have the right to:

  • access the personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete your information in certain circumstances;
  • ask us to restrict or object to certain processing;
  • request a copy of your information in a portable format, where applicable;
  • withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email shoibxlimited@gmail.com. We will respond within one month. If you are unhappy with how we have handled your information, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concern first.

11. Cookies

We use strictly necessary cookies and, only with your consent, analytics and marketing cookies. See our Cookie Policy for full details and how to change your preferences.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with the date it was last updated.

13. Contact us

SHOAIBX LIMITED
Email: shoibxlimited@gmail.com
Telephone: +44 7473 64390
Registered office: 103–105 Hammersmith Grove, London, England, W6 0NQ